az group create --name my-res-hub --location eastus

Question

az group create --name my-res-hub --location eastus

(RequestDisallowedByAzure) Resource 'my-res-hub' was disallowed by Azure: This policy maintains a set of best available regions where your subscription can deploy resources. The objective of this policy is to ensure that your subscription has full access to Azure services with optimal performance. Should you need additional or different regions, contact support..

Code: RequestDisallowedByAzure

Message: Resource 'my-res-hub' was disallowed by Azure: This policy maintains a set of best available regions where your subscription can deploy resources. The objective of this policy is to ensure that your subscription has full access to Azure services with optimal performance. Should you need additional or different regions, contact support..

Target: my-res-hub

Answer 1

Hello NURADIN HASSAN

Thank you for posting your query on Microsoft Q&A platform.

Your organization assigns policies to enforce organizational standards and to assess compliance at-scale. If you're trying to deploy a resource that violates a policy, the deployment is blocked.

The error message “RequestDisallowedByAzure” indicates that the resources you're trying to deploy are blocked due to a policy restricting the Azure regions where your subscription can create resources.

In your case, eastus is not one of the allowed regions, so the resource group my-res-hub is blocked at creation time.

This policy is commonly applied to Azure for Students, Free Trial, Sponsored, and region‑optimized subscriptions to ensure service availability and capacity management.

This usually happens when an Azure Policy such as “Allowed locations” or “Allowed resource deployment regions” is applied to ensure compliance and control over where resources can be deployed.

Verify:

1. In the Azure Portal, go to Policy > Assignments, and look for Allowed locations.
2. Open the policy assignment and check the Parameters tab to see the list of approved regions.
3. Make sure to create your resource group in one of these allowed regions.

If you need access to regions outside this list, you may need to contact Azure support for further assistance.

Reference: https://learn.microsoft.com/en-us/azure/azure-resource-manager/troubleshooting/error-policy-requestdisallowedbypolicy?tabs=azure-cli

Please find the documentation to raise support request:

https://learn.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request

Hope this helps. Please let me know if you have any queries.

Thanks,

Suchitra.

Answer 2

Hi,

Azure for Students restricts which regions you can deploy resources to. Typically you are restricted to five different regions, and these vary for each person.

Please navigate to Azure Policy -- Authoring -- Assignments using link below:

https://portal.azure.com/#view/Microsoft_Azure_Policy/PolicyMenuBlade/~/Assignments

Click on assignment named Allowed resource deployment regions

Examine Allowed locations Parameter value for list of regions, similar to below (regions in screenshot are different than yours):

The regions shown in your Parameter value are the ones you are allowed to deploy resources to. Please try to create resources in one of these regions and let me know the results.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP